$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: jdyotcSEg2LBx8Kg/yXpOSYG8sueHDH09INIbtvWONY= Subject key identifier: 8F:1E:0A:65:CB:DC:41:34:7D:4C:C9:16:14:40:FD:A8:58:B7:5E:AB Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 0491 Signing time: Wed 14 May 2025 17:32:20 +0000 Manifest this update: Wed 14 May 2025 17:32:20 +0000 Manifest next update: Wed 21 May 2025 17:32:20 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 9g7jX970Vet8zqL20NtjPXFAR7roBYTT2yISudbs0E8=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: May 14 17:32:20 2025 GMT Not After : May 21 17:32:20 2025 GMT Subject: CN=6824d3a4-85a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:a2:c1:fd:2e:89:b8:1c:a4:48:6e:89:0c: fc:6e:f2:a0:a6:b4:a5:8f:3a:b9:95:b7:8e:ef:2e: 5b:30:0f:dc:24:00:58:5a:8f:f9:c0:0e:b4:fe:e6: a3:92:fd:96:c2:02:b7:a4:bb:a3:ed:91:8f:16:93: 23:7c:ff:f6:04:d8:97:d6:47:13:b0:3c:cd:7e:95: 7b:53:c9:87:5f:e3:de:ad:db:f4:8d:03:4d:c9:78: 66:3b:1c:a4:c4:4f:bd:66:01:9a:c5:a5:bb:ed:0c: f3:db:95:be:b2:6f:60:a7:12:1d:f8:aa:71:dc:b4: 73:7f:64:a7:d2:b5:97:12:cf:0f:26:72:7e:bd:96: c9:d2:03:4f:71:37:8e:f1:ca:8f:0c:ab:50:4d:22: 79:be:bc:37:6b:6c:0b:03:cd:d0:15:0b:9c:3f:c6: 7b:32:39:35:f8:6b:da:69:83:4b:e5:61:0d:84:54: 54:9a:24:b1:94:40:68:5d:88:de:ea:d2:62:8c:a5: 68:af:96:39:5d:85:22:ba:87:f0:c2:4f:d8:89:5b: 57:07:c5:97:00:5d:3f:32:82:0b:9f:af:0b:93:55: f5:0a:12:91:7e:07:0b:fd:c9:06:de:51:a4:5b:71: 31:ff:2f:c8:45:f8:f5:ac:a5:a8:d5:c9:51:ee:7f: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:0A:65:CB:DC:41:34:7D:4C:C9:16:14:40:FD:A8:58:B7:5E:AB X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:38:35:6c:0e:8b:c5:2e:49:ff:86:44:c7:34:c2:57:2c: 8a:40:4b:54:d0:e6:d4:47:20:9e:5e:ec:c2:db:96:40:8c:44: c4:8a:ac:5b:88:54:63:bf:33:ee:68:75:e7:3a:8f:6d:cf:56: 1f:21:13:63:77:c0:1a:63:52:e2:f4:74:ec:f9:80:90:13:53: 13:af:43:23:a1:95:bc:c7:1a:6b:ac:88:ed:24:5e:47:a3:d3: bb:f0:fc:1a:8d:dc:c3:59:73:09:e8:6d:67:67:61:c6:5a:1d: 09:ca:72:70:86:f2:d1:a7:cd:38:38:c8:f9:06:75:87:f4:14: 0a:72:d6:53:05:f4:44:ff:18:6c:51:84:12:70:0f:ad:cd:99: f1:cd:1c:b0:5d:0d:b6:69:de:e7:dc:8a:29:af:a1:83:09:0e: 96:f1:30:40:7a:de:9c:4e:04:72:65:82:17:1a:6a:f9:11:1d: 2a:d7:98:83:09:3d:06:6c:1b:87:fd:65:41:2a:9c:69:ca:d8: 40:7c:2e:6c:cb:f8:71:41:a9:70:22:d5:21:ac:b8:45:3c:be: ce:b1:6a:b6:ab:d9:b3:cd:3e:ba:64:00:96:f9:54:7b:ed:3f: a8:59:f7:6d:10:f2:41:b3:0a:b3:ce:37:31:ea:b4:08:4c:b0: a5:bf:96:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwNTE0MTczMjIwWhcNMjUwNTIxMTczMjIwWjAYMRYwFAYD VQQDEw02ODI0ZDNhNC04NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB2iwf0uibgcpEhuiQz8bvKgprSljzq5lbeO7y5bMA/cJABYWo/5wA60/uaj kv2WwgK3pLuj7ZGPFpMjfP/2BNiX1kcTsDzNfpV7U8mHX+Perdv0jQNNyXhmOxyk xE+9ZgGaxaW77Qzz25W+sm9gpxId+Kpx3LRzf2Sn0rWXEs8PJnJ+vZbJ0gNPcTeO 8cqPDKtQTSJ5vrw3a2wLA83QFQucP8Z7Mjk1+GvaaYNL5WENhFRUmiSxlEBoXYje 6tJijKVor5Y5XYUiuofwwk/YiVtXB8WXAF0/MoILn68Lk1X1ChKRfgcL/ckG3lGk W3Ex/y/IRfj1rKWo1clR7n9i/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8eCmXL 3EE0fUzJFhRA/ahYt16rMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCkDg1bA6LxS5J/4ZExzTCVyyKQEtU0ObURyCeXuzC25ZAjETEiqxb iFRjvzPuaHXnOo9tz1YfIRNjd8AaY1Li9HTs+YCQE1MTr0MjoZW8xxprrIjtJF5H o9O78PwajdzDWXMJ6G1nZ2HGWh0JynJwhvLRp804OMj5BnWH9BQKctZTBfRE/xhs UYQScA+tzZnxzRywXQ22ad7n3Iopr6GDCQ6W8TBAet6cTgRyZYIXGmr5ER0q15iD CT0GbBuH/WVBKpxpythAfC5sy/hxQalwItUhrLhFPL7OsWq2q9mzzT66ZACW+VR7 7T+oWfdtEPJBswqzzjcx6rQITLClv5aa -----END CERTIFICATE-----Generated at Thu May 15 18:00:19 2025 by rpki-client